Multiple London councils, including Chelsea and Westminster, were hit by a cyberattack that may have exposed resident data.

Cyberattack on OnSolve CodeRED disrupted emergency alert services for U.S. state, local, police, and fire agencies.

The AISI Research Center's Cybersecurity Observatory publishes the report "Dissecting a new malspam chain delivering Purelogs infostealer"

The latest SecurityAffairs newsletter highlights a surge in cyber threats, from large-scale data breaches to sophisticated malware campaigns and emerging vulnerabilities. Organizations worldwide are facing unprecedented challenges as attackers exploit software flaws, compromise critical infrastructure, and target personal and corporate data. This edition brings together major incidents, technical analyses, and insights into evolving tactics used by cybercriminals and nation-state actors.

US, Australia and UK sanctioned 2 Russian bulletproof hosting providers accused of aiding groups like LockBit, BlackSuit and Play.

A social engineering attack on DoorDash led to a breach exposing names, addresses, emails, and phone numbers of users, Dashers, and merchants

RondoDox botnet exploits unpatched XWiki flaw CVE-2025-24893 to gain RCE and infect more servers, despite fixes released in February 2025.

Microsoft says the Aisuru botnet launched a 15.7 Tbps DDoS on Azure from 500k IPs, using massive UDP floods peaking at 3.6 B pps.

Researchers found a critical vulnerability in GoSign Desktop: TLS Certificate Validation Disabled and Unsigned Update Mechanism.

Malicious Chrome extension “Safery: Ethereum Wallet” steals users’ seed phrases while posing as a legit crypto wallet still available online.

Amazon warns that an advanced threat actor exploited zero-days in Cisco ISE and Citrix NetScaler to deploy custom malware.

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox flaws to its Known Exploited Vulnerabilities catalog.

Synology fixed a critical BeeStation RCE flaw (CVE-2025-12686) shown at Pwn2Own, caused by unchecked buffer input allowing code execution.

Australia’s spy chief warns China-linked actors are probing critical infrastructure and preparing for cyber sabotage and espionage.

Researchers found Fantasy Hub, a Russian MaaS Android RAT that lets attackers spy, steal data, and control devices via Telegram.

Nine NuGet packages by “shanhai666” can deploy delayed payloads to disrupt databases and industrial systems.

With a 4M cybersecurity worker shortage, agentic AI helps SOCs move beyond triage, enabling proactive security once thought impossible.

Denmark and Norway probe a security flaw in Chinese-made Yutong buses, deepening EU fears over reliance on Chinese tech and potential risks

Microsoft uncovered Whisper Leak side-channel attack that lets network snoopers infer AI chat topics despite encryption, risking user privacy.

The Weekly SecurityAffairs Breakdown of Cyber Threats, Espionage, and Digital Deception The cyber battlefield is evolving faster than ever, and this week’s SecurityAffairs International Newsletter paints a chilling portrait of that transformation. From ransomware striking U.S. state systems to North Korean espionage campaigns and weaponized AI assistants, the report reveals a digital world under siege. Governments, corporations, and individuals are all navigating a storm of vulnerabilities that blur the line between crime and warfare.

Curly COMrades threat actors exploit Windows Hyper-V to hide Linux VMs, evade EDR tools, and deploy custom malware undetected.

Cisco warns of a new attack variant exploiting CVE-2025-20333 and CVE-2025-20362 in Secure Firewall ASA and FTD devices.

The Clop Ransomware group claims the breach of The Washington Post and added the American daily newspaper to its Tor data leak site.

Google warns malware now uses AI to mutate, adapt, and collect data during execution, boosting evasion and persistence.